"According to various top-secret documents provided by Snowden,
FoxAcid is the NSA codename for what the NSA calls an "exploit
orchestrator," an Internet-enabled system capable of attacking tar
get computers in a variety of different ways. It is a Windows 2003
computer configured with custom so ftware and a series of Perl
scripts. These servers are run by the NSA's tailored access operations,
o r TAO, group. TAO is another subgroup of the systems intelligence
directorate.

The servers are on the public Internet. They have normal-looking
domain names, and can be visited by any browser from anywhere; ownership
of those domains cannot be traced back to the NSA."